Click here to Skip to main content
15,867,835 members
Home / Discussions / C#
   

C#

 
QuestionHow do you protect your app hosting third party dll ...? [modified] Pin
devvvy2-Mar-11 21:32
devvvy2-Mar-11 21:32 
Hi
One question - is it impossible to safe guard an application hosting third party dll?

See this thread, even if third party dll loaded into separate AppDomain, it can still access AppDomain.Current.Get/SetData[^]

In addition to AppDomain.Current.Get/SetData, can third party examine application memory. For example, hosting application may contain a secret/private key in some application context, which is used to decrypt communications or licensing file. Even if private key is not placed in AppDomain.Current.Get/SetData, is it possible for third party dll to ... perhaps "reflect" on the process memory foot print and extract the private key?

If the answer is yes - then it follows really the moment you load a third party dll into your own process, you cannot be sure if your process has been compromised?

I think security is even more important than say process isolation safe guarding against crashes in third party dll.

Thanks

NOTE: This is NOT a question on CAS[^] as setting permissions/evidence doesn't has anything to do with access to AppDomain from third party dll[^]

Also, this is not a question on serializing access to a singleton instance object[^]
dev
modified on Thursday, March 3, 2011 5:41 AM

AnswerRe: How do you protect your app hosting third party dll ...? Pin
Eddy Vluggen3-Mar-11 6:58
professionalEddy Vluggen3-Mar-11 6:58 
GeneralRe: How do you protect your app hosting third party dll ...? Pin
devvvy3-Mar-11 15:21
devvvy3-Mar-11 15:21 
GeneralRe: How do you protect your app hosting third party dll ...? Pin
Eddy Vluggen4-Mar-11 11:04
professionalEddy Vluggen4-Mar-11 11:04 
GeneralRe: How do you protect your app hosting third party dll ...? [modified] Pin
devvvy4-Mar-11 22:28
devvvy4-Mar-11 22:28 
GeneralRe: How do you protect your app hosting third party dll ...? Pin
Eddy Vluggen5-Mar-11 3:02
professionalEddy Vluggen5-Mar-11 3:02 
GeneralRe: How do you protect your app hosting third party dll ...? Pin
devvvy5-Mar-11 14:24
devvvy5-Mar-11 14:24 
GeneralRe: How do you protect your app hosting third party dll ...? Pin
Eddy Vluggen7-Mar-11 0:41
professionalEddy Vluggen7-Mar-11 0:41 
GeneralRe: How do you protect your app hosting third party dll ...? Pin
devvvy7-Mar-11 14:27
devvvy7-Mar-11 14:27 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.